[Samba] Question RE expired autogenerated certificates

[Jakob Curdes]

Hi all, sorry, nobody has an idea here? Are these certificates only used 
for LDAPS or also for inter-DC communication?

Regards, Jakob

Am 10.06.2025 um 22:46 schrieb Jakob Curdes via samba:
> Hello community, I am facing a situation where I need valid 
> certificates on our two DCs; I need to attach a mailserver via LDAPS 
> which rejects expired certificates and it seems there is no way to 
> circumvent that.
> The default certs are expired as the DCs have been setup more than two 
> years ago.
> I know that the default certificates can be replaced by removing them 
> and restarting samba, but before doing such a thing on  a production 
> DC I would like to make sure tihs has no unintended consequences.
> Especially I am not sure where these certificates are used, also in 
> client-server communication? Will the clients accept the new 
> certificate straigtaway? We are talking about Ubuntu 22 LTS server.
>
> Thank ou for helping, Jakob
>